Privacy Policy of the Bopizy platform
ARTICLE 1: PREAMBLE
The purpose of this privacy policy is to inform users of the Bopizy platform:
- About how their personal data is collected. Personal data is considered to be any information that can identify a user. This may include: their first and last names, age, postal or email address, location, or IP address (non-exhaustive list);
- About the rights they have regarding this data;
- About the person responsible for processing the collected and processed personal data;
- About the recipients of this personal data;
- On the site's cookie policy.
This policy complements the legal notices and the General Terms of Use available to users at the following address: https://www.bopizy.com/pages/conditions-generales-d-utilisation-et-de-service-de-bopizy
This privacy policy complements the privacy policy of our commercial site Bopizy.com, which can be consulted at the following address: https://www.bopizy.com/policies/privacy-policy
ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA
In accordance with Article 5 of European Regulation 2016/679, personal data are:
- Processed lawfully, fairly and transparently in relation to the data subject;
- Collected for specified (see Article 3.1 hereof), explicit and legitimate purposes, and not further processed in a manner that is incompatible with those purposes;
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, with respect to the purposes for which they are processed, are erased or rectified without delay;
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
- Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
The processing is lawful only if, and to the extent that, at least one of the following conditions is met:
- The data subject has consented to the processing of their personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject;
- The processing is necessary for compliance with a legal obligation to which the data controller is subject;
- The processing is necessary to protect the vital interests of the data subject or another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
- The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject requiring protection of personal data prevail, particularly when the data subject is a child.
ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF NAVIGATING THE SITE
Article 3.1: Collected Data
The personal data collected in the context of our activity are as follows:
- Identifiers, including name, email address, mailing address, and phone number;
- Categories of personal information listed in the customer records status, including name, mailing address, billing address, phone number, and credit or debit card information;
- Business information, including the products you purchase, those you add to your cart, your favorites, or your rating (if you are a customer), as well as the information you provide us about yourself or your business (if you are a merchant);
- Photos and videos, which may include images of your face, if you provide them;
- Internet and other information on electronic network activity, including information about the device and browser you use, your network connection, your IP address, and browsing information when you navigate our applications and sites;
- Geolocation data, including your mailing address and billing address;
- Inferences, or information derived from other personal information about you, including your preferences, interests, and other information used for personalizing your experience;
- Other information you provide; and sensitive personal information, including: Official identifiers, such as social security number, driver's license number, national ID card number, or passport number;
- Your access credentials to your account (such as login ID, financial account ID, or the credit or debit card number associated with a required secure access code, or identifiers allowing access to an account);
The collection and processing of this data serves the following purpose(s):
- prevent risks and fraud;
- respond to questions or provide other types of assistance;
- help merchants find and use the services;
- provide and improve products and services;
- provide reports and analytics;
- test additional features or services;
- send communication to merchants related to Bopizy services;
- provide assistance for marketing, advertising, or other communications.
Article 3.2: Data collection method
When you use our site, we collect and use personal information provided by:
You: we collect the information you provide when you use our platform, including when you sign up on Bopizy as a merchant, visit a store powered by Bopizy, fill out information related to your order, visit a Bopizy website, or contact Bopizy Support. We collect account and payment information you provide to us (including information about your business if you are a merchant), information you provide to Bopizy stores, purchases you make, reviews you post, and how you interact or communicate with stores or other users through our applications and services. We also collect browsing information when you navigate our applications and sites, including the search terms you enter.
Your device or devices: we collect information about and from your devices, including computers, phones, and other internet-connected devices you use to access our applications and services. We combine this information across the different devices you use.
Third parties: we receive information from partners who help us provide our services to you, including:
Service providers: we receive information from our service providers, who help us provide services to our merchants, for example, verifying accounts for fraud or other concerning elements.
Subsequent subcontractors: we work with third-party subcontractors for cloud hosting, content delivery, data analysis, technical support management, customer relations, internal logging, order processing services, and email transmission, among others, to provide you with our services.
Data and cookie analytics providers: we receive information through our use of cookies, social plug-ins, pixels, and tags for commercial purposes, such as providing information to measure how users interact with the content of our website. To learn more about how we use these technologies, please see our Cookie Policy.
Given that we need your personal information to provide Bopizy services, we generally retain your personal information, including sensitive information, for as long as you use Bopizy products or services or until you request us to delete your information. We may also retain your personal information to comply with legal obligations or to protect our interests or those of others.
If you act as a merchant in a store powered by Bopizy and you close your store, stop paying your subscription fees, or we terminate your account, we will retain your store data for two years before starting the deletion process.
When you visit or make a purchase from a store powered by Bopizy, please note that we act as a service provider or data processor on behalf of the merchants, and it is these merchants who decide how long to retain your information, not Bopizy.
The company may retain certain personal data beyond the timeframes announced above in order to fulfill its legal or regulatory obligations.
Article 3.3: Data Hosting
Google Cloud Platform
Google France, 8 rue de Londres, 75 009 Paris – France.
Article 3.4: Cookie Policy
Some cookies are necessary to allow you to navigate our website, to use its features, and to access its secure parts. The use of these cookies is essential for the functioning of the website. For example, we use user input cookies for the duration of a session to track user input when filling out forms across multiple pages.
We also use functional cookies to remember the choices you have made or the information you have provided, such as your username, your language, or the region you are in. This allows us to personalize your experience on our website according to your preferences. For example, authentication cookies are functional cookies used for the duration of a session (or persistent, if you agree to use the 'Remember me' feature) to allow users to identify themselves during their subsequent visits or to access authorized content across multiple pages. Here are some of the functional cookies we use:
- User-centered security cookies are used to detect authentication abuse for a limited continuous duration, such as unsuccessful login attempts. These cookies are specifically configured to enhance the security of the service.
- Multimedia content reading cookies (flash cookies) are used for the duration of a session to store the technical data necessary for playing video or audio content (for example: image quality, network connection speed, and buffering settings).
- Persistent user interface customization cookies are used to save a user's preference regarding a service across multiple web pages.
Improving user experience is a fundamental aspect for Bopizy, and we employ many tools to enhance our website and our commerce platform. To this end, we use reporting and data analysis cookies to collect information on how you use our website or the online stores of our merchants, as well as your usage frequency. Here are some of the performance cookies we use:
- Proprietary data analysis cookies: we use these cookies to estimate the number of unique visitors, to improve our websites and those of our merchants. These cookies are not used to target you with online marketing. We use these cookies to learn more about the performance of our websites and those of our merchants, as well as to make relevant improvements to your browsing experience.
- Third-party data analysis cookies: we also use Google Analytics and other third-party data analysis providers to help us evaluate how users interact with the content of our website. These cookies 'remember' our users' actions on previous pages and how they interact with the website. To learn more about Google Analytics, please visit Google's information page.
- Advertising cookies are used on our website to personalize marketing content based on you and your interests, and to then offer you a more personalized service. These cookies remember your visit to our website. Although these cookies can track visits made from your device to our website and other sites, they generally cannot personally identify you. Without these cookies, the ads you see would be less relevant and less interesting to you.
ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER
Article 4.1: The data controller
Personal data is collected by Bopizy, SAS with a capital of 237000€, whose registration number is 978 531 903 R.C.S. Lillemetropole.
The data controller can be contacted in the following ways:
By mail to the address: Bopizy, 87 Rue du Fontenoy, 59100 Roubaix;
By email: support@bopizy.com.
Article 4.2: The data protection officer
The company's or the controller's data protection officer is:
Loic Gueguen
Address: Bopizy, 87 Rue du Fontenoy, 59100 Roubaix
Email: support@bopizy.com
If you believe, after contacting us, that your 'Data Protection' rights are not being respected, you can send information to the CNIL.
ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING
Any user concerned by the processing of their personal data may assert the following rights, in accordance with European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):
- Right of access, rectification, and right to erasure of data (set out in Articles 15, 16, and 17 of the GDPR respectively);
- Right to data portability (Article 20 of the GDPR);
- Right to restriction (Article 18 of the GDPR) and to object to data processing (Article 21 of the GDPR);
- Right not to be subject to a decision based solely on automated processing;
- Right to determine the fate of data after death;
- Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR).
To exercise your rights, please send your letter to Bopizy, 87 Rue du Fontenoy, 59100 Roubaix or by email to support@bopizy.com
In order for the data controller to comply with their request, the user may be required to provide certain information such as: their first and last names, their email address, as well as their account number, personal space, or subscriber number.
Visit the site cnil.fr for more information about your rights.
ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY
The publisher of the site Bopizy.com reserves the right to modify this Policy at any time to ensure its compliance with applicable law for the users of the site.
Any changes shall not affect purchases made prior on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user upon validation of the purchase.
The user is invited to review this Policy each time they use our services, without the need to formally notify them.
This policy, published on 01/02/2025, was updated on 03/02/2025.